Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
File: f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa (raw, json)
Hash identifier: XDPAKZT2oW+d0txMCORxfCVYsf+7hbwTAQMYRLTtaV4=
Subject key identifier: 0B:00:0D:CF:13:66:39:40:53:40:8E:E2:4E:50:7F:9A:2B:C3:E2:AA
Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial: 010D0C9F4328584840E5520E37F9B040CA615C98
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 400238
IP address blocks: 109.73.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:52:0e:37:f9:b0:40:ca:61:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=9b5c23e6-4557-44bf-a302-4cff8afbaaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:47:d4:d4:59:26:57:ad:da:de:52:26:6e:
9f:7c:e6:e2:f4:aa:3e:9b:63:08:1c:5f:c8:02:0a:
bc:cd:8e:3a:ef:c6:4c:eb:6b:05:ef:ab:5f:0b:90:
30:1a:5f:7e:3d:3a:38:39:b4:3e:5f:cb:ec:57:f1:
3d:5e:79:cb:1d:9e:97:48:d2:f6:ca:27:03:ca:46:
c9:5a:fa:00:ef:0b:c2:70:d6:3b:44:23:25:79:86:
e2:87:c9:c0:37:2d:ca:cb:85:de:c3:07:50:7a:52:
c6:13:c6:41:1a:2a:17:c3:3c:ed:16:15:01:b4:b5:
68:73:2c:cd:1f:b0:09:46:40:b5:d4:1b:ed:a6:a8:
5a:6a:a5:bf:85:02:76:10:5c:58:e7:d0:22:21:5a:
1a:b8:25:41:33:cb:b5:04:5e:73:e2:09:2d:e1:e9:
6b:ef:7e:b8:a9:1d:36:28:b6:cd:ca:3a:6e:e5:60:
d2:24:22:32:73:1e:c4:cf:4f:13:88:47:29:5a:f6:
d7:03:5d:70:cf:08:84:d8:aa:44:de:9f:dd:32:17:
a9:d3:58:14:16:05:5c:79:e6:40:5e:cd:ab:a1:ac:
58:de:14:d6:71:56:c9:00:f3:89:6f:79:4c:da:a3:
e2:c8:5d:82:8b:95:98:cd:97:22:ad:1e:5b:51:cb:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:0D:CF:13:66:39:40:53:40:8E:E2:4E:50:7F:9A:2B:C3:E2:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
X509v3 Authority Key Identifier:
keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
sbgp-ipAddrBlock: critical
IPv4:
109.73.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:86:bc:23:2d:8b:e0:5a:71:48:c5:ce:46:e9:49:c4:fd:0d:
5f:03:9d:a3:e8:65:92:55:b8:41:a7:2c:ca:ac:24:56:9d:5f:
5e:71:b2:42:d4:06:f4:75:13:fa:95:cd:a8:71:72:3e:c5:f3:
82:c3:ea:16:09:b3:67:75:91:86:28:4e:eb:a9:fa:a7:85:8f:
a9:e3:46:e5:eb:20:c6:8c:a6:9a:99:c1:47:d0:11:b2:5c:13:
cd:35:33:ee:86:f6:a2:f3:b9:6e:d1:17:48:fd:55:25:64:84:
67:a9:9b:88:f3:29:59:14:95:2d:73:b6:13:47:7e:b9:00:8d:
ee:ed:a4:4f:2d:e0:3e:ff:2f:47:ba:a9:1b:43:5f:61:97:fb:
0f:03:7a:81:5d:7b:e9:01:bf:c2:ad:55:67:40:c2:06:d1:d2:
e9:2e:4c:d7:fc:33:34:92:d6:49:f2:e7:61:e5:eb:6f:93:92:
e7:37:ef:4b:4e:19:a9:19:18:ef:11:71:42:31:ce:3b:c8:55:
80:6a:94:80:f0:a7:f9:9b:49:98:34:e5:df:d2:4b:9f:46:14:
cf:1c:55:58:9c:04:65:c1:a7:a3:09:29:48:bf:5a:d4:2a:21:
d6:3e:8b:d5:86:d8:16:13:12:d1:61:a5:fa:d3:3a:dc:24:7d:
20:a8:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:02:18 2025 by rpki-client